Call: +44 (0)1904 557620 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "Details published about the mod_plsql 0-day bug"] [Next entry: "An argument rages in the ePress between Oracle and Litchfield"]

Many ways to become a DBA presentation updated

I was speaking at the UKOUG Unix SIG in the Institute of Physics yesterday about Oracle Security. The talk focused on the different types of threats an Oracle database may come under, where to find information and tools. I also gave some examples of how to exploit Oracle, talked about various tools and demonstrated some of them and then I talked about how you might audit a database for vulnerabilities, some ideas on how to use the audit features of Oracle and also how to secure a database. I felt the talk went quite well and I had changed it quite a bit since last time I gave it. I removed some slides, added new ones to cover recent advances in Oracle security and also changed the text on most of the slides to enhance them. I also prepared almost all of the examples shown in the slides so that I could demonstrate them live.

I have passed the slides to the UKOUG for publishing on their site but the latest updated slides are also available as a presentation titled "Many ways to become DBA"